$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28e68c3f-20e0-38e6-9057-bf4b7475db74.roa File: 28e68c3f-20e0-38e6-9057-bf4b7475db74.roa (raw, json) Hash identifier: D2XgK9J3n9x5yss4cWmJ1cLI/J6Uov0jedZWI6EuoAU= Subject key identifier: 51:DF:AA:52:84:7F:65:1A:55:1D:F5:3A:89:5B:50:73:69:5A:A7:8A Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584DE2B5ED258D924FD43A2A9880 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28e68c3f-20e0-38e6-9057-bf4b7475db74.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 5650 IP address blocks: 104.251.84.0/24 maxlen: 24 104.251.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:ed:25:8d:92:4f:d4:3a:2a:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=7b532f7b-f4bc-4a09-91b6-283f1cda8101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a0:db:17:29:80:b6:d5:5f:54:fa:b2:8f:b9: 65:20:d3:31:d3:be:91:08:8b:cb:6d:74:cd:fd:e7: d6:2e:c4:89:33:13:d2:68:3a:e2:3d:23:ca:07:aa: ac:3e:f4:3d:db:9a:64:55:4f:c2:18:ea:f3:78:eb: c5:fb:ba:eb:4d:bc:a6:d8:0d:62:0f:ab:35:52:61: 79:47:74:77:2e:9d:13:19:cc:f3:22:53:57:37:fb: 06:36:df:2f:67:b4:96:e7:bf:9f:08:ac:19:7e:f5: fc:d4:25:93:2f:36:60:d7:55:31:30:3d:84:60:f5: 5b:80:07:4e:23:25:5a:df:6e:a4:2c:b2:df:c0:46: db:8f:21:c9:c9:46:db:cf:dc:65:89:21:a5:f4:0e: ca:8b:23:2d:f0:80:cf:b5:df:88:a0:23:bb:fb:25: 51:47:03:d1:7b:3c:b1:9e:ef:46:91:ff:8d:11:68: d9:fe:8b:28:90:c3:5a:8d:f6:dc:7f:c7:bd:30:e7: ce:9a:7d:e7:62:a7:06:c8:47:ff:45:6a:98:5b:75: fd:6f:3e:26:75:8a:16:5f:fa:12:80:e5:c9:3e:0a: 96:da:37:19:85:39:03:6d:da:3f:52:c1:1d:a3:d7: b1:aa:c2:54:e0:e8:8a:77:34:9d:27:3a:ca:21:30: 78:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DF:AA:52:84:7F:65:1A:55:1D:F5:3A:89:5B:50:73:69:5A:A7:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28e68c3f-20e0-38e6-9057-bf4b7475db74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.84.0/24 104.251.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:54:e6:1c:20:88:0d:a6:18:3d:bc:e5:4b:5b:72:d9:1a:65: 2d:73:49:81:3a:64:18:cc:de:62:ca:67:ff:29:be:2b:cc:72: 60:63:60:0c:a3:2c:10:8a:bf:d0:4a:73:d3:f6:5b:d5:16:d7: c0:e7:e0:f2:08:37:f9:1a:05:21:a0:e5:97:50:6f:eb:dc:ad: 17:81:48:73:df:64:32:f0:50:81:bf:6b:1c:c1:06:79:53:b5: 87:77:76:c1:27:22:9d:08:98:1a:e5:e9:49:5a:7b:e1:b9:71: 8a:df:03:9a:01:a3:53:ca:9b:19:ba:43:dd:7c:30:da:09:bd: b1:4b:44:a0:cc:c6:d7:01:d8:ad:7d:55:5b:5d:e9:cf:78:d2: 69:94:fa:fc:3d:d2:16:3e:a4:c9:94:1c:02:d4:de:67:a6:40: fd:60:59:cc:74:b4:67:72:54:e8:d3:28:c0:51:f5:cf:bc:a0: db:ff:e9:f8:88:d0:74:d4:98:02:d8:5f:9a:55:3f:94:a5:c1: 2d:98:49:9e:47:b0:c8:eb:68:ee:59:46:1f:48:bf:ba:31:23: 9b:1d:36:42:17:a9:3d:d6:81:d3:6c:ee:9a:f4:b1:42:74:5f: 2a:77:34:fa:49:00:8a:5d:1a:dc:d1:0c:74:e0:13:5f:c6:43: 1d:bd:cb:c2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE3ite0ljZJP1DoqmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk N2I1MzJmN2ItZjRiYy00YTA5LTkxYjYtMjgzZjFjZGE4MTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6DbFymAttVfVPqyj7llINMx076RCIvLbXTN /efWLsSJMxPSaDriPSPKB6qsPvQ925pkVU/CGOrzeOvF+7rrTbym2A1iD6s1UmF5 R3R3Lp0TGczzIlNXN/sGNt8vZ7SW57+fCKwZfvX81CWTLzZg11UxMD2EYPVbgAdO IyVa326kLLLfwEbbjyHJyUbbz9xliSGl9A7KiyMt8IDPtd+IoCO7+yVRRwPRezyx nu9Gkf+NEWjZ/osokMNajfbcf8e9MOfOmn3nYqcGyEf/RWqYW3X9bz4mdYoWX/oS gOXJPgqW2jcZhTkDbdo/UsEdo9exqsJU4OiKdzSdJzrKITB4PQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFHfqlKEf2UaVR31OolbUHNpWqeKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMjhlNjhjM2YtMjBlMC0z OGU2LTkwNTctYmY0Yjc0NzVkYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPtUAwQA aPtcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE5U5hwgiA2mGD285UtbctkaZS1zSYE6ZBjM3mLKZ/8pvivM cmBjYAyjLBCKv9BKc9P2W9UW18Dn4PIIN/kaBSGg5ZdQb+vcrReBSHPfZDLwUIG/ axzBBnlTtYd3dsEnIp0ImBrl6Ulae+G5cYrfA5oBo1PKmxm6Q918MNoJvbFLRKDM xtcB2K19VVtd6c940mmU+vw90hY+pMmUHALU3memQP1gWcx0tGdyVOjTKMBR9c+8 oNv/6fiI0HTUmALYX5pVP5SlwS2YSZ5HsMjraO5ZRh9Iv7oxI5sdNkIXqT3WgdNs 7pr0sUJ0Xyp3NPpJAIpdGtzRDHTgE1/GQx29y8I= -----END CERTIFICATE-----Generated at Wed Jun 3 08:17:43 2026 by rpki-client